Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-110003— Azul Payara Administration REST Interface Authentication Bypass via X-GlassFish-authToken Header Leading to Remote Code Execution

Quick assessment

Affected
Azul Payara Payara Server
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Azul Payara 的管理 REST 接口存在一个安全漏洞，允许远程未认证的攻击者通过在 HTTP 请求头 中提供任意值，绕过 secure-admin 的远程访问限制。该请求头的存在会导致系统在验证令牌之前跳过远程拒绝检查；若提供的令牌无效，则请求会降级为基于密码的身份验证。在默认域中，若管理员密码为空，则无需凭据即可通过身份验证。成功利用此漏洞可执行任意管理命令，等同于完全控制服务器。

CVSS 9.3 · Critical
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-110003

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Azul Payara Administration REST Interface Authentication Bypass via X-GlassFish-authToken Header Leading to Remote Code Execution
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the administration REST interface of Azul Payara allows a remote, unauthenticated attacker to bypass secure-admin remote-access restrictions by supplying an arbitrary value in the X-GlassFish-authToken HTTP header. The header's presence waives the remote-rejection check before the token is validated, and an invalid token falls through to password-based authentication, which succeeds without credentials on default domains configured with an empty administrative password. Successful exploitation grants execution of arbitrary administrative commands, equivalent to complete compromise of the server.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
使用候选路径或通道进行的认证绕过
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Azul Payara Payara Server 7.0.0 ~ 7.6.0 -

II. Public POCs for CVE-2026-110003

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-110003

请登录查看更多情报信息。

Other References for CVE-2026-110003 (5)

IV. Related Vulnerabilities

Same product: Payara Server
Same vendor: Azul Payara
Same weakness: CWE-288